JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.150.104.236

92.150.104.236 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 44%: ?

44%

ISP	Orange S.A.
Usage Type	Fixed Line ISP
ASN	AS3215
Hostname(s)	lfbn-mar-1-776-236.w92-150.abo.wanadoo.fr
Domain Name	orange.com
Country	🇫🇷 France
City	Afa, Corsica

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.150.104.236

Whois 92.150.104.236

IP Abuse Reports for 92.150.104.236:

This IP address has been reported a total of 13 times from 11 distinct sources. 92.150.104.236 was first reported on May 27th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 agaesteves	2026-06-27 22:22:16 (5 hours ago)	[SISHIPISMO 360] TipoAtaque.EXT_PROBE \| Extensão de arquivo suspeita no path: /index.php \| Paths: /i ... show more [SISHIPISMO 360] TipoAtaque.EXT_PROBE \| Extensão de arquivo suspeita no path: /index.php \| Paths: /index.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15. show less	Web App Attack
Anonymous	2026-06-24 16:11:33 (3 days ago)	Blocked by UFW (TCP on 9000) Source port: 53434 TTL: 44 Packet length: 60 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 9000) Source port: 53434 TTL: 44 Packet length: 60 TOS: 0x14 This report (for 92.150.104.236) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-24 01:28:33 (4 days ago)	Blocked by UFW (TCP on 8200) Source port: 58777 TTL: 235 Packet length: 40 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 8200) Source port: 58777 TTL: 235 Packet length: 40 TOS: 0x14 This report (for 92.150.104.236) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-09 20:37:41 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 92.150.104.236 (lfbn-mar-1-776-236.w92-150.abo. ... show more (mod_security) mod_security (id:210492) triggered by 92.150.104.236 (lfbn-mar-1-776-236.w92-150.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:37:36.989792 2026] [security2:error] [pid 28166:tid 28192] [client 92.150.104.236:58103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanacademyofprojectmanagement.com"] [uri "/wp-config.php.bak"] [unique_id "aih5kPUzkjpVtXyT5UtsYwAAANg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 cityhunter_rhone	2026-06-08 01:38:21 (2 weeks ago)	Honeypot port triggered: HONEYPOT PORT 9200 touched. Automatic permanent ban. Mercurius-Guide automa ... show more Honeypot port triggered: HONEYPOT PORT 9200 touched. Automatic permanent ban. Mercurius-Guide automated detection. show less	Port Scan Hacking Brute-Force
🇩🇪 heyzg	2026-06-08 00:50:20 (2 weeks ago)	HTTP honeypot \| Command Execution \| 13 cmds, 14 HTTP, 3s	Hacking SSH
🇪🇸 NullBlue	2026-06-07 22:12:17 (2 weeks ago)	Web reconnaissance: 66 requests probing JS/static asset paths (UA Python-urllib) for app fingerprint ... show more Web reconnaissance: 66 requests probing JS/static asset paths (UA Python-urllib) for app fingerprinting. Captured by NullBlue67 honeypot - 2026-06-08. show less	Web App Attack
Anonymous	2026-06-07 18:46:15 (2 weeks ago)	2026-06-07T19:46:14.716821+01:00 vps kernel: [42598137.826776] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-07T19:46:14.716821+01:00 vps kernel: [42598137.826776] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=92.150.104.236 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=25538 DF PROTO=TCP SPT=63954 DPT=27017 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 dispaisyenterprises	2026-06-03 11:47:32 (3 weeks ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2379 [1], 8200 [1], 5052 [1] TCP R ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2379 [1], 8200 [1], 5052 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-06-02 22:51:52 (3 weeks ago)	92.150.104.236 - - [03/Jun/2026:01:51:50 +0300] "GET /credentials.json HTTP/1.1" 404 271 92.150.104. ... show more 92.150.104.236 - - [03/Jun/2026:01:51:50 +0300] "GET /credentials.json HTTP/1.1" 404 271 92.150.104.236 - - [03/Jun/2026:01:51:50 +0300] "GET /.git/HEAD HTTP/1.1" 403 257 92.150.104.236 - - [03/Jun/2026:01:51:51 +0300] "GET /phpmyadmin HTTP/1.1" 404 265 show less	Bad Web Bot
🇫🇷 Hiigara	2026-06-02 09:00:52 (3 weeks ago)	connection attempt : 92.150.104.236 on port : tcp/8888 (Unknown)	Port Scan
🇺🇸 ShadowWhisperer	2026-05-29 11:45:35 (4 weeks ago)	DOCKER port scan / probe. GET /.env.prod	Port Scan
🇺🇸 ShadowWhisperer	2026-05-27 18:32:40 (1 month ago)	HTTPS GET /.git/config UA: Python-urllib/3.12	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.242

🇺🇸 216.26.231.129

🇺🇸 216.25.89.91

🇧🇷 205.210.31.243

🇺🇸 205.210.31.101

🇫🇷 185.252.232.218

🇨🇦 170.187.181.71

🇺🇸 162.216.149.139

🇲🇾 149.118.135.252

🇵🇰 111.68.111.124

🇳🇱 31.14.32.6

🇨🇦 216.26.250.208

🇬🇧 193.176.29.30

🇹🇭 159.192.121.74

🇯🇵 101.36.104.242

🇵🇰 72.255.18.48

🇩🇪 69.5.169.207

🇳🇱 45.156.128.109

🇨🇳 36.135.92.36

🇨🇦 216.26.236.87